horizon: Correct SAN in SSL certs (SOC-10584)

The gensslcert script from apache-utils didn't support setting SAN values.
This resulted in useless certificate which had SAN set to
email:webmaster@... or (in new version) FQDN of the node where horizon
was deployed. After adding new option to gensslcert, crowbar can set SAN
to proper values which is especially important in HA deployments.

chef/cookbooks/horizon/recipes/server.rb

@@ -517,9 +517,14 @@
 if node[:horizon][:apache][:ssl] && node[:horizon][:apache][:generate_certs]
   package "apache2-utils"
 
+  san_domains = []
+  san_domains.push(CrowbarHelper.get_host_for_public_url(node, true, ha_enabled))
+  san_domains.push(CrowbarHelper.get_host_for_admin_url(node, ha_enabled))
+  san = san_domains.map { |d| "DNS:#{d}" }.join(",")
+
   bash "Generate Apache certificate" do
     code <<-EOH
-      (umask 377 ; /usr/bin/gensslcert -C openstack-dashboard -n openstack-dashboard)
+      (umask 377 ; /usr/bin/gensslcert -C openstack-dashboard -n openstack-dashboard -a "#{san}")
 EOH
     only_if do
       !File.size?(node[:horizon][:apache][:ssl_crt_file]) && (